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WHAT IS CLAIMED IS: 

1. A system for distributing a content, comprising: 
an identification certificate containing a template 

serving as identification data of a user receiving a 

content; 

container information in which a content transaction 
condition is set including an identification certificate 
identifier list associating with said identification 
certificate; 

a content key for enciphering a content; 

a secure container including the content enciphered 
with the content key and said container information; 

a content distributor for distributing the content by 
moving said secure container; 

at least one user device for transacting the content 
with said content distributor; 

whereby user authentication is performed in accordance 
with the identification certificate identified on the basis 
of the identification certificate identifier list when said 
secure container is moved, so that the content usable on 
said user device is distributed with content transaction 
managed. 

2. A system for distributing a content according to 
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Claim. 1, wherein said identification certificate is issued 
by an identification authority, third party organization. 

3. A system for distributing a content according to 
Claim. 1, wherein said container information further 
includes data in which the condition of secondary 
distribution is set, the secondary distribution 
redistributing the content after first distribution. 

4 . A system for distributing a content according to 
Claim. 1, wherein said content distributor is a service 
provider distributing said secure container, the service 
provider authenticating a user of said user device receiving 
said secure container through comparing the template 
contained in said identification certificate identified on 
the basis of the identification certificate identifier list 
with sampling information input by the user, subsequently 
allowing the content to be used on said user device, 
provided that the user has been authenticated. 

5 . A system for distributing a content according to 
Claim. 1, wherein said content distributor is a service 
provider distributing said secure container, and the service 
provider authenticates a user of said user device receiving 
said secure container by comparing the template contained in 
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said identification certificate identified on the basis of 
the identification certificate identifier list with sampling 
information input by the user, subsequently distributing 
said content key with which the content contained in said 
secure container was enciphered, provided that the user has 
been authenticated. 

6 . A system for distributing a content according to 
Claim. 1, wherein said content distributor is a service 
provider distributing said secure container, and said user 
device receiving said secure container authenticates a user 
thereof by comparing the template contained in the 
identification certificate identified on the basis of the 
identification certificate identifier list with sampling 
information input by the user, subsequently informing the 
service provider of the user authentication result, and thus 
the service provider allows the content to be used on said 
user device, provided that the user has been authenticated. 

7 . A system for distributing a content according to 
Claim. 1, wherein said content distributor is a service 
provider distributing said secure container, and said user 
device receiving secure container authenticates a user 
thereof by comparing the template contained in the 
identification certificate identified on the basis of the 
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identification certificate identifier list with sampling 
information input by the user, subsequently informing the 
service provider of the user authentication, thereby the 
service provider distributing to said user device said 
secure container and said content key with which the content 
contained in said secure container was enciphered, provided 
that the user has been authenticated. 

8. A system for distributing a content according to 
Claim. 1, wherein said content distributor is a service 
provider and said at least one user device comprises a 
plurality of user devices, and said identification 
certificate is previously contained in the service provider 
or a user device that is to perform the user authentication, 
said identification certificate being to be used for user 
authentication performed when said secure container is moved 
between the service provider and a user device and between 
user devices . 

9 . A system for distributing a content according to 
Claim. 1, wherein said content distributor is a service 
provider and said at least one user device comprises a 
plurality of user devices, and said identification 
certificate is acquired from an identification authority, 
identification certificate issuer, by the service provider 
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or a user device that is to perform the user authentication, 
the identification certificate being to be used for user 
authentication performed when the secure container is moved 
between the service provider and a user device and between 
user devices . 

10. A system for distributing a content according to 
Claim. 1, wherein said container information further 
includes data for permitting content use including 
reproduction and copying, thereby allowing said user device 
receiving the secure container to use the content under the 
restriction of content use in accordance with the data for 
permitting content use. 

11. A system for distributing a content according to 
Claim. 1, wherein said secure container further includes a 
digital signature provided by a secure container producer. 

12. A system for distributing a content according to 
Claim. 1, wherein the identification certificate identifier 
list includes data associating an identifier of a content 
user with a identification certificate identifier of the 
user . 

13 . A system for distributing a content according to 



- 222 - 



Claim. 1, wherein said content distributor is a service 
provider and said at least one user device comprising a 
plurality of user devices, each of the service provider and 
the user devices performing content transaction having an 
encryption processing unit, and the user devices 
authenticate one another when data are transmitted 
therebetween, subsequently a data- transmitting user device 
generating a digital signature to data to be transmitted, a 
data-receiving user device verifying the digital signature. 

14. A system for distributing a content according to 
Claim. 1, wherein the template includes at least one piece 
of information selected from among personal biotic 
information including fingerprint information, retina 
pattern information, iris pattern information, voice print 
information, and handwriting information and a non- biotic 
information including a seal, a passport, a driver's license, 
and a card or any combination of the biotic and non-biotic 
information and a password. 

15. A method of distributing a content, comprising: 
the step of distributing a content by moving a secure 

container including the content enciphered with a content 
key and container information in which a content transaction 
condition is set including an identification certificate 
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identifier list associating with an identification 
certificate containing a template serving as identification 
data of a user to which a content is distributed; and 

the step of performing user authentication in 
accordance with the identification certificate identified on 
the basis of the identification certificate identifier list 
when the secure container is moved to distribute the content, 

whereby the content usable on a user device is 
distributed with content transaction managed. 

16. A method of distributing a content according to 
Claim. 15, wherein the identification certificate is issued 
by an identification authority, third party organization. 

17 . A method of distributing a content according to 
Claim. 15, wherein the container information includes data 
in which the condition of secondary distribution is set, the 
secondary distribution redistributing the content after 
first distribution. 

18. A method of distributing a content according to 
Claim. 15, wherein, in said step of performing user 
authentication, a service provider distributing a secure 
container compares the template contained in the 
identification certificate identified on the basis of the 
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identification certificate identifier list with sampling 
information input by a user of a secure container receiving 
device, thereby authenticating the user, and said method 
further comprises : 

the step in which the service provider allows a content 
to be used on the secure container receiving device, 
provided that the user has been authenticated. 

19. A method of distributing a content according to 
Claim. 15, wherein, in said step of performing user 
authentication, a service provider distributing the secure 
container compares the template contained in the 
identification certificate identified on the basis of the 
identification certificate identifier list with sampling 
information input by a user of a secure container receiving 
device, thereby authenticating the user, and said method 
further comprises : 

the step in which the service provider distributes the 
content key with which the content contained in the secure 
container was enciphered, provided that the user has been 
authenticated. 

20. A method of distributing a content according to 
Claim. 15, wherein, in said step of performing user 
authentication, a user device receiving secure container 
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authenticates a user thereof by comparing the template 
contained in the identification certificate identified on 
the basis of the identification certificate identifier list 
with sampling information input by the user, and said method 
further comprises : 

the step in which the user device informs the service 
provider distributing the secure container of the user 
authentication according to said step of performing user 
authentication; and 

the step in which the service provider allows the 
content to be used on the secure container receiving device, 
provided that the user has been authenticated. 

21. A method of distributing a content according to 
Claim. 15, wherein, in said step of performing user 
authentication, a user device receiving the secure container 
authenticates a user thereof by comparing the template 
contained in the identification certificate identified on 
the basis of the identification certificate identifier list 
with sampling information input by the user, and said method 
comprises : 

the step in which the user device informs the service 
provider distributing the secure container of the user 
authentication according to said step of performing user 
authentication ; 
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the step in which the service provider distributes the 
secure container to the user device, provided that the user 
of the user device has been authenticated; and 

the step in which the service provider distributes the 
content key with which the content contained in the secure 
container was enciphered, provided that the user of the user 
device has been authenticated. 

22. A method of distributing a content according to 
Claim. 15, wherein the identification certificate which is 
to be used for user authentication performed when the secure 
container is moved between a service provider and a user 
device and between user devices is previously contained in 
the service provider or a user device that is to perform the 
user authentication. 

23. A method of distributing a content according to 
Claim. 15, wherein the identification certificate which is 
to be used for user authentication performed when the secure 
container is moved between a service provider and a user 
device and between user devices is acquired from an 
identification authority, identification certificate issuer, 
by the service provider or a user device that is to perform 
the user authentication. 
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24. A method of distributing a content according to 
Claim. 15, wherein the container information further 
includes data for permitting content use including 
reproduction and copying, thereby allowing a secure 
container receiving device to use the content under the 
restriction of content use in accordance with the data for 
permitting content use. 

25. A method of distributing a content according to 
Claim. 15, wherein each of the service provider and user 
devices transacting a content has an encryption processing 
unit , and said method further comprises : 

the step in which user devices authenticate one another 
when data are transmitted therebetween; 

the step in which a data- transmitting user device 
generates a digital signature to data to be transmitted; and 

the step in which a data-receiving user device verifies 
the digital signature. 

26. An information processing apparatus for 
distributing a content by moving a secure container 
including a content enciphered with the content key and 
container information, in which a content transaction 
condition is set, including an identification certificate 
identifier list associating with an identification 
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certificate containing a template serving as identification 
data of a user to which the content is distributed, said 
apparatus comprising: 

a section for performing user authentication through 
comparing the template contained in the identification 
certificate identified on the basis of the identification 
certificate identifier list with sampling information input 
by a user of a secure container receiving device; and 

a section for allowing the content to be used on the 
secure container receiving device, provided that the user 
has been authenticated. 

27. An information processing apparatus according to 
Claim. 26, further comprising a section for distributing the 
content key with which the content contained in the secure 
container was enciphered, provided that the user has been 
authenticated . 

28. An information processing apparatus for receiving a 
content by moving a secure container including a content 
enciphered with the content key and container information, 
in which a content transaction condition is set, including 
an identification certificate identifier list associating 
with an identification certificate containing a template 
serving as identification data of a user to which the 
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content is distributed, said apparatus comprising: 

a section for performing user authentication through 
comparing the template contained in the identification 
certificate identified on the basis of the identification 
certificate identifier list with sampling information input 
by a user thereof; and 

a section for informing a secure container distributor 
of the user authentication. 

29. A medium for providing a computer program for 
managing a content transaction to distribute a content 
usable on a user device, said program comprising: 

distributing a content by moving a secure container 
including a content enciphered with a content key and a 
container information in which a content transaction 
condition is set, the container information including an 
identification certificate identifier list associating with 
a identification certificate containing a template serving 
as identification data of a user receiving the content. 



